Quantum Factorization of 143 on a Dipolar-Coupling NMR system 
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Quantum algorithms could be much faster than classical ones in solving the factoring problem. 
Adiabatic quantum computation for this is an alternative approach other than Shor's algorithm. 
Here we report an improved adiabatic factoring algorithm and its experimental realization to factor 
the number 143 on a liquid crystal NMR quantum processor with dipole-dipole couplings. We 
believe this to be the largest number factored in quantum-computation realizations, which shows 
the practical importance of adiabatic quantum algorithms. 
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Multiplying two integers is often easy while its in- 
verse operation - decomposing an integer into a prod- 
uct of two unknown factors - is hard. In fact, no effec- 
tive methods in classical computers is available now to 
factor a large number which is a product of two prime 
integers [1. Based on this lack of factoring ability, crypto- 
graphic techniques such as RSA have ensured the safety 
of secure communications [2 . However, Shor proposed his 
famous factoring algorithm [3 in 1994 which could fac- 
tor a larger number in polynomial time with the size of 
the number on a quantum computer. Early experimen- 
tal progresses have been done to demonstrate the core 
process of Shor's algorithm on liquid-state NMR[4 and 
photonic systems fS", '6^ for the simplest case - the factoring 
of number 15. 

While traditional quantum algorithms including Shor's 
algorithm are represented in circuit model, i.e., compu- 
tation performed by a sequence of discrete operations, a 
new kind of quantum computation based on the adiabatic 
theory was proposed by Farhi et al. ^ where the system 
was driven by a continuously-varying Hamiltonian. Un- 
like circuit-based quantum algorithms, adiabatic quan- 
tum computation (AQC) is designed for a large class of 
optimization problems - problems to find the best one 
among all possible assignments. Moreover, AQC shows a 
better robustness against error caused by dephasing, en- 
vironmental noise and imperfection of unitary operations 
[H [9] . Thus it has grown up rapidly as an attractive field 
of quantum computation researches. 

Several computational hard problems have been formu- 
lated as optimization problems and solved in the architec- 
ture of AQC, for example the 3-SAT problem, Deutsch's 
problem and quantum database search [7, [TQHT4] . Re- 
cently Peng et al. [15] have adopted a simple scheme 
to solve the factoring problem in AQC and implemented 
it on a liquid-state NMR system to factor the number 
21. However, this scheme could be very hard for large 
applications due to the exponentially-growing spectrum 
width of the problem Hamiltonian. At the same time, 
another adiabatic factoring scheme provided by Schaller 
and Schiitzhold [ITl |T8] could suppress the spectrum 



width and shows to be much faster than classical fac- 
toring algorithms or even an exponential speed-up. 

However, Schaller and Schiitzhold's original factoring 
scheme is too hard to be implemented for any nontrival 
factoring cases on current quantum processors. In this 
letter, we improve the original scheme to use less re- 
sources by simplifing the equations mathematically. And 
a factoring case of 143 is choosed as an example to be 
resolved in this scheme and finally experimentally im- 
plemented on a liquid-crystal NMR system with dipolar 
couplings. We believe this to be the largest number fac- 
tored on quantum computation realizations. 

As mentioned before, AQC was originally proposed to 
solve the optimization problem. Because the solution 
space of an optimization problem grows exponentially 
with the size of problem, to find the best one is very 
hard for the classical computers when the problem's size 
is large. In the framework of AQC, a quantum system is 
prepared in the ground state of initial Hamiltonian Hq 
, while the possible solutions of the problem is encoded 
to the eignestates state of problem Hamiltonian Hp and 
the best solution to its ground state. For the compu- 
tation, the time-dependent Hamiltonian varies from Hq 
to Hp^ and if this process performs slowly enough, the 
quantum adiabatic theorem will ensure the system stays 
in its instantaneous ground state. So in the end, the sys- 
tem will be in the ground state of Hp which denotes the 
best solution of the problem. Simply the time-dependent 
Hamiltonian is realized by an interpolation scheme 

H{t) = [l-s{t)]Ho + s{t)Hp, (1) 

where the function s{t) varies from to 1 to parametrize 
the interpolation. The solution of the optimization prob- 
lem could be determined by an measurement of the sys- 
tem after the computation. 

Here, the factoring problem is expressed as a formula 
N = p X where N is the known product while p and 
q are the prime factors to be found. The key part of 
adiabatic factoring algorithm is to convert the factoring 
problem to an optimization problem, and solve it under 
the AQC architecture. The most straightforward scheme 



2 



is to represent the formula as an equation N—pq = and 
form a cost function f{x^y) = (N — xy)'^ ^ where f{x^y) 
is a non- negative integer and f(jp-,q) = is the minimal 
value of the function. The problem Hamiltonian Hp could 
be constructed with the same form of f{x^y)^ i.e. Hp = 
[N — X X ^]^, where both x and y are number operators 

formed by XI^Jq^ 2* ^^-^^ where n is the bit width of 

the number and a* is the operator representing the 
ith bit. Thus the ground state of Hp has the zero energy 
which denotes the case that N = xy. After the adiabatic 
evolution and measurement, we could get the result p 
and q. Peng et al. [15] have implemented this scheme 
experimentally to factor 21. However in this scheme, the 
spectrum of problem Hamiltonian scales with the number 
N ^ thus it is very hard to implement in experiment when 
N is large. 

To avoid this drawback, Schaller and Schi2tzhold[l8] 
adopted another scheme by BurgesfTB^ to map the factor- 
ing problem to an optimization problem. Their adiabatic 
factoring algorithm starts with a binary-multiplication 
table which is shown in Tabjlj In the table, pi and qi in 
the first two rows represent the bits of the multipliers 
and the following four rows are the intermediate results 
of the multiplication and j are the carries from ith bit 
to the jth bit. The last row is the binary representation 
of number N to be factorized. In order to get a nontrivial 
case, we set N to be odd, thus the last bit {i.e. the least 
significant bit) of multipliers is binary value 1. The bit 
width of should equal the summation of the two mul- 
tipliers' width. For a given product N, the combinations 
of these two multipliers' bit width are bounded linearly 
with n. So we could just focus on a specific combination 
where the bit widths of the numbers equals with each 
other and set the first bit {i.e. most significant bit) to be 
1. 

Then, the factoring equations could be got from each 
column in TabJT| where all the variables Pi^qi^Zij in the 
equations are binary. To construct the problem Hamil- 
tonian, first we construct bit-wise Hamiltonian for each 
equation by directly mapping the binary variables to op- 
erators on qubits, i.e. Hp = (pi + — 1 — 2^12)^, where 
each symbol with hat is the corresponding operator ^-^^ 
of the qubit for each variable. Then the problem Hamil- 
tonian Hp = ^Hp is a summation of all the bit- wise 
Hamiltonians. In this way, the ground state of Hp en- 
codes the two factors that satisfy all the bit-wise equa- 
tions and is the answer to our factoring problem. Thus 
the spectrum of Hp will not scale with N but log2N. 

However, for the example of our interest, the Schaller 
and Schiitzhold's scheme [18 need at least 14 qubits to 
factor the number 143, which exceeds the limitation of 
current quantum computation technology. So in our ex- 
periment, we introduce a mathematical simplification to 
reduce the number of equations in the above scheme due 
to the requirement that all the variables should be or 
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TABLE I: Binary multiplication table. The top two rows are 
binary representation of the multipliers whose first and last 
bit are set too be 1. The bottom row is the bits of the number 
to be factorized which in our example is 143. Zij is the carry 
bit from the ith bit to the jth bit in the summation. The 
significance of each bit in the column increases from right to 
left. 

1. The first equation pi-\-qi = 2zi2, for example, Z12 
must be otherwise the equation could not be satisfied, 
and so piqi =0. After applying the same rule to all the 
equations, we can get a new group of equations, which 
are : + = 1, p2 + ^2 = 1 and p2<7i +Pi<72 = 1- Ob- 
viously this reduction rule costs a polynomial time with 
the number of equations. 

To construct the problem Hamiltonian from this sim- 
plified equations, the bit-wise Hamiltonians are con- 
structed by H^ = {Pi^qi - 1)^ , H^ = (^2+^2 - 1)^ and 
Hp = {p2qi -\- Piq2 — 1)^- But this construction method 
causes Hp to have a four-body interactions, which is hard 
to be implemented experimentally. In this case, Schaller 
and Sch{^tzhold[18 introduced another construction form 
that for the equation like AB-\-S = 0, the problem Hamil- 
tonian could be constructed by2[^(A + ^— ^) + S']^ — |, 
which could reduce one order of the many-body interac- 
tions in experiment. Thus we replace the third bit- wise 
Hamiltonian as Hp^ = 2[^{pi + ^2 — |) +P2^i — 1]^ - |- 
So the problem Hamiltonian is , 

Hp = 5 - 3j9i - J92 - + 2piqi - 3p2qi 

+ 2pip2qi - 3(72 +Pi(72 + 2p2q2 + 2p2<7ig2, 

where the operators p and q are mapped into the qubits' 

space as pi = , p2 = , qi = and q2 = . 

For the adiabatic evolution, without the loss of gen- 
erality, we choose the initial Hamiltonian Hq = g{crl + 
cr^ + • • • + <j^) where ^ is a parameter to scale the spec- 
trum of Hq. And the ground state of the operator is 

/ |o\_|i\ \ 

1^*^ = ( ' [y^ J - a superposition of all the possible 
states. So for the computation, we prepare the system 
on the state Itpi) with the Hamiltonian being i^o, and 
slowly vary the Hamiltonian from Hq to Hp according to 
Eq.Q, the quantum adiabatic theorem ensures that the 
system will be at the ground state of Hp^ which repre- 
sents the answer to the problem of interests. 
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We numerically simulate the process of factoring 143 
as shown in Figjl] Specially, the ground state of the 
problem Hamiltonian in Eq.([2| is degenerated. This is 
because two multipliers p and q have the same bit width, 
thus an exchange of p and q also denotes the right answer. 
From the simulation, we could see that the prime factors 
of 143 is 11 and 13. 
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FIG. 1: Process of the adiabatic factorization of 143. a) the 
lowest three energy levels of the time-dependent Hamiltonian 
in Eq.([T]), The parameter g in the initial Hamiltonian is 0.6. 
b) k=1^5 shows the populations on computational basis of 
the system during the adiabatic evolution at different times 
marked in a); k=6 shows the result got from our experiment. 
The experimental result agrees well with the theoretical ex- 
pectation. The system finally stays on a superposition of |6) 
and 1 9), which denotes that the answer is {p = 11, = 13} or 
{p=13,^=ll} 




FIG. 2: (Color online) Quantum register in our experiment, 
a) The structure of the l-Bromo-2-Chlorobenzene molecule. 
The four nuclei in ovals forms the qubits in our experi- 
ment, b) Spectrum of "^H of the thermal state pth = X)t=i 
applying a [7v/2]y pulse. Transitions are labeled according to 
descending order of their frequencies, c) Labeling scheme for 
the states of the four-qubit system 



Now we turn to our NMR quantum processor to realize 
the above scheme of factoring 143. The four qubits are 
represented by the four nuclear spins in l-Bromo-2- 
Chlorobenzene (C6H4ClBr) which is dissolved in the liq- 
uid crystal solvent ZLI-1132 at temperature 300 K. The 
structure of the molecule is shown in Figj2^ and the four 
qubits are marked by the ovals. By fitting the thermal 



equilibrium spectrum in Figj2]D, the natural Hamltonian 
of the four-qubit system in the rotating frame is 

+2^ E^,J,^<J D,j{2im -lUi- PyPy). (2) 

where the chemical shifts ui = 2264.8Hz, U2 = 2190.4Hz, 
Us = 2127.3Hz, = 2113.5Hz, the dipolar couplings 
strengthes D12 = -706.6Hz, Dis = -214.0Hz, D14 = 
-1166.5Hz, D23 = -1553.8Hz, D24 = -149.8Hz, 1^34 = 
— 95.5Hz and the J-couplings J12 = OHz, J13 = 1.4Hz, 
Ji4 = 8Hz, J23 = 8Hz, J24 = 1.4Hz, J34 = 8Hz . The 
labeling transition scheme for the energy levels is shown 
in Figj2]3. 

The whole experimental procedure can be described 
as three steps: preparation of the ground state of i^o, 
adiabatic passage by the time-dependent Hamiltonian 
H{t), and measurement of the final state. Starting from 
thermal equilibrium, we firstly created the pseudo-pure 
state(PPS) poooo = + e|0000)(0000|, where e de- 

scribes the thermal polarization of the system and I 
is an unit matrix. The PPS was prepared from the 
thermal equilibrium state by applying one shape pulse 
based on GRadient Ascent Pulse Engineering (GRAPE) 
algorithm^ and one 2;-direction gradient pulse, with the 
fidelity 99% in the numerical simulation. FigjS^ shows 
the NMR spectrum after a small angle flip pulse [20 of 
state poooo- Then one ^ hard pulse was applied to poooo 
on the 2/-axis to obtain the ground state of i^o, ^.e., |— )*^'^ 
(I-) = (|0) - |l))/^/2). 
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FIG. 3: (Color online) NMR spectra for the small-angle-flip 
observation of the PPS and the output state pout, respectively. 
The blue spectra (thick) are the experimental results, and 
the red spectra (thin) are the simulated ones, a) c) Spectra 
corresponding to the PPS poooo and pim by applying a small 
angle flip (3°) pulse. The main peaks are No. 33 and No. 
3 labeled in the thermal equilibrium spectrum, b) Spectrum 
corresponding to the output state pout after applying a small 
angle flip (3°) pulse, which just consists of the peaks of No. 
33 and No. 3. 



In the experiment, the adiabatic evolution was approx- 
imated by M discrete steps [TSHISl [21]. We utilized the 
linear interpolation s{t) = t/T, where T is the total evo- 
lution time. Thus the time evolution for each adiabatic 
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step is Um = e"*^"^'^ where r = T/M is the duration of 
each step, and Hm = {I — ^)Ho-\-{^)Hp is the interme- 
diate Hamiltonian of the mth step. And the total evolu- 
tion applied on the initial state is Uad = nm=i 
adiabatic condition is satisfied when T, M oo. Here 
we chose the parameters g = 0.6, M = 20 and T = 20. 
Numerical simlation shows that the probabilities of the 
system on the ground states of Hp is 98.9%, which means 
that we could achieve the right answer to the factoring 
problem of 143 almost definitely. We packed together the 
unitary operators every five adiabatic steps in one shaped 
pulse calculated by the GRAPE method[19 , with the 
length of each pulse 15ms and the fidelity with the theo- 
retical operator over 99%. So the total evolution time is 
about Tfot = 60m5. 

Finally we measured all the diagonal elements of the 
final density matrix pfin using the Hamiltonian's diag- 
onalization method [22]. 32 reading-out GRAPE pulses 
for population measurement were used after the adia- 
batic evolution, with each pulse's length 20m5. Com- 
bined with the normalization condition P{i) = 1, 
we reconstructed all the diagonal elements of the final 
state Pfin- Step k = 6 of FigjljD shows the experimen- 
tal result of all the diagonal elements excluding the de- 
coherence through compensating the attenuation factor 
^-Ttot/T^ , where Ttot is the total evolution time 60ms 
and T2* is the decoherence time 102m5. The experiment 
(step k = 6) agrees well with the theoretical expectations 
(step /c = 5), showing that the factors of 143 is 11 and 
13. 

On the other hand, to illustrate the result more directly 
from the NMR experiment, a comprehensible spectrum 
was also given by applying a small angle fiip (3°) after 
two TT operators on the second and third qubit and one 
gradient pulse. 

Pout = Gz{Rl\n)pf,nRl'H^)^) (3) 

For the liquid crystal sample, since the Hamiltonian in- 
cludes non-diagonal elements, the eigenstates are not 
Zeeman product states but their linear combinations, ex- 
cept 1 0000) and |1111). If there just exist two populations 
|0000)(0000| and |1111) (1111|, the spectrum would be 
comprehensible as containing only two main peaks after 
a small angle pulse excitation. The motivation of adding 
the TT pulses after the adiabatic evolution is convers- 
ing |0110)(0110| and |1001) (1001| to |0000) (0000| and 
|1111) (1111|, while the gradient pulse was used to make 
the output pout concentrated on the diagonal elements of 
the density matrix. Thus the small angle fiip observation 
would be easily compared with poooo and pim (Figj3|, 
indicating that the factors of 143 is 11 and 13. 

To be concluded, we improved the adiabatic factoring 
scheme and implemented it to factor 143 in our NMR 
platform. The sample we used for experiment is oriented 
in the liquid crystal thus it has dipole-dipole coupling in- 
teractions which are utilized for the computation. The 



experimental result matches well with theoretical expec- 
tations. To our knowledge, this is the first experimental 
realization of quantum algorithms to factor a number 
larger than 100. 
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